Lucene search
MitreVULNRICHMENT:CVE-2024-40347HistoryJul 20, 2024 - 12:00 a.m.
CVE-2024-40347
2024-07-2000:00:00
mitre
github.com
1
vulnerability
xss
hyland alfresco platform
arbitrary code
user's browser
crafted payload
htmlid
code execution
AI Score
6
Confidence
High
EPSS
0.001
Percentile
17.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
A reflected cross-site scripting (XSS) vulnerability in Hyland Alfresco Platform 23.2.1-r96 allows attackers to execute arbitrary code in the context of a user’s browser via injecting a crafted payload into the parameter htmlid.
Related
cvelist
cvelist
CVE-2024-40347
2024-07-20 00:00:00
nvd
nvd
CVE-2024-40347
2024-07-20 04:15:03
cve
cve
CVE-2024-40347
2024-07-20 04:15:03
AI Score
6
Confidence
High
EPSS
0.001
Percentile
17.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-40347